Spec

A valid IPv4 or IPv6 CIDR. Subnet length must be /26 or less for IPv4 and /122 or less for IPv6. Must not overlap with the Link Local range 169.254.0.0/16 or fe80::/10.

string

ipipMode

The IPIP mode defining when IPIP will be used.

Always, CrossSubnet, Never

string

Never

natOutgoing

When enabled, packets sent from Calico networked containers in this pool to destinations outside of this pool will be masqueraded.

true, false

boolean

false

disabled

When set to true, Calico IPAM will not assign addresses from this pool.

true, false

boolean

false

Routing of packets using IP-in-IP will be used when the destination IP address
is in an IP Pool that has IPIP enabled. In addition, if the ipipMode is set to CrossSubnet,
Calico will only route using IP-in-IP if the IP address of the destination node is in a different
subnet. The subnet of each node is configured on the node resource (which may be automatically
determined when running the calico/node service).

Note: Setting natOutgoing is recommended on any IP Pool with ipip enabled.
When ipip is enabled without natOutgoing routing between Workloads and
Hosts running Calico is asymmetric and may cause traffic to be filtered due to
RPF checks failing.